Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95e30e56-36cf-39ad-84e7-126727f7a8e7.roa
File:                     95e30e56-36cf-39ad-84e7-126727f7a8e7.roa (raw, json)
Hash identifier:          hDuPMlVgOsrA6d+2bRz1S2/XvUr43gm58UqitiG/Bfw=
Subject key identifier:   88:23:4F:BD:31:B7:35:2F:60:25:9A:6F:9F:06:8B:FD:77:60:1D:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DC7CF86FE2C10FED8AF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95e30e56-36cf-39ad-84e7-126727f7a8e7.roa
Signing time:             Tue 26 Aug 2025 12:32:14 +0000
ROA not before:           Tue 26 Aug 2025 12:32:14 +0000
ROA not after:            Mon 24 Nov 2025 13:32:14 +0000
asID:                     397205
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:c7:cf:86:fe:2c:10:fe:d8:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:14 2025 GMT
            Not After : Nov 24 13:32:14 2025 GMT
        Subject: CN=9be47df0-9bd1-4865-bd83-80a01a312ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:ee:2c:1c:51:29:cc:5b:01:fd:e2:a4:ff:
                    d8:c0:be:6b:b7:b2:e8:70:83:1f:35:5a:9a:1a:86:
                    34:83:50:03:84:b2:cd:ff:86:15:b3:c2:fe:c4:bf:
                    f8:7a:53:8f:8f:6f:e8:20:6f:27:2c:95:38:27:4b:
                    34:bc:78:a6:49:f4:5f:58:00:47:5b:f7:2c:ed:96:
                    79:d5:29:98:70:fa:fc:9a:bb:42:67:1a:16:18:cc:
                    8e:1f:05:77:62:08:7d:65:12:43:a9:6d:8c:be:ef:
                    09:d6:50:e6:2c:99:24:b7:90:e2:99:44:5b:d9:f3:
                    7d:e0:67:1d:ee:57:99:f6:f8:16:35:04:c0:da:fb:
                    82:f8:37:92:c4:84:ac:86:ac:02:6d:18:01:a8:da:
                    6b:69:ae:6a:c4:95:af:fc:be:85:99:96:da:61:d0:
                    77:31:0a:12:c6:cb:a0:c7:bf:55:54:75:52:d1:2a:
                    a1:8f:7d:6a:f5:74:14:ac:7d:fa:86:cf:a3:10:4e:
                    e1:63:51:63:93:09:94:53:6b:fc:79:34:ac:34:7e:
                    05:32:ce:b7:dc:7b:64:68:c4:7c:16:2a:98:03:fa:
                    3b:12:50:8f:94:ca:60:c5:02:9b:d9:c2:c8:cd:ca:
                    75:bf:ee:40:4b:f6:3f:f0:e3:2c:7b:5d:f3:69:13:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:23:4F:BD:31:B7:35:2F:60:25:9A:6F:9F:06:8B:FD:77:60:1D:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95e30e56-36cf-39ad-84e7-126727f7a8e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:f2:ef:66:ae:bc:63:2d:b8:77:06:33:ce:c2:9f:0c:6f:16:
         b4:41:e9:d9:6f:03:84:2b:1b:2a:ea:0b:91:9a:5c:20:90:ac:
         7e:a8:f1:3f:4a:70:a0:6c:e4:db:7a:e1:8b:75:8a:34:05:3b:
         54:d2:09:aa:f3:25:b4:f1:36:e2:9d:d5:41:a4:ae:06:b5:e8:
         a3:23:cd:62:a8:e3:04:56:ba:a7:e6:97:66:0a:d9:c6:df:a1:
         07:79:02:50:70:f4:52:f9:a1:cf:98:e4:a3:1b:f1:43:ad:43:
         20:6c:b5:1b:8d:26:7a:34:b9:f7:fe:f7:f6:8e:dd:fc:86:64:
         58:fc:99:44:ae:2e:69:be:33:b4:82:1e:13:a4:94:f7:b2:cb:
         d9:f8:33:08:e6:70:cb:a5:3b:d9:1e:47:d4:64:51:99:2d:bb:
         a5:af:f3:b9:49:2d:5d:08:7a:59:61:bc:90:bb:98:52:3f:27:
         67:8b:a2:03:79:19:4f:69:56:f5:48:f9:69:af:ad:e2:3f:f0:
         03:53:e0:fc:6a:4d:01:8f:05:7c:0c:e9:3e:66:35:37:b4:36:
         60:20:c2:9b:2a:41:a5:0b:0e:75:ee:fa:a5:9e:b9:08:bd:42:
         f6:38:10:87:39:cd:d0:5a:22:6b:b5:ef:59:69:0c:fb:74:34:
         18:b8:d7:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8DcfPhv4sEP7Yr4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyNjEyMzIxNFoXDTI1MTEyNDEzMzIxNFowLzEtMCsGA1UEAxMk
OWJlNDdkZjAtOWJkMS00ODY1LWJkODMtODBhMDFhMzEyZGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu3uLBxRKcxbAf3ipP/YwL5rt7LocIMfNVqa
GoY0g1ADhLLN/4YVs8L+xL/4elOPj2/oIG8nLJU4J0s0vHimSfRfWABHW/cs7ZZ5
1SmYcPr8mrtCZxoWGMyOHwV3Ygh9ZRJDqW2Mvu8J1lDmLJkkt5DimURb2fN94Gcd
7leZ9vgWNQTA2vuC+DeSxISshqwCbRgBqNpraa5qxJWv/L6FmZbaYdB3MQoSxsug
x79VVHVS0Sqhj31q9XQUrH36hs+jEE7hY1FjkwmUU2v8eTSsNH4FMs633HtkaMR8
FiqYA/o7ElCPlMpgxQKb2cLIzcp1v+5AS/Y/8OMse13zaRO03wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIgjT70xtzUvYCWab58Gi/13YB2RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTVlMzBlNTYtMzZjZi0z
OWFkLTg0ZTctMTI2NzI3ZjdhOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIfy72auvGMtuHcGM87CnwxvFrRB6dlvA4QrGyrqC5GaXCCQrH6o8T9K
cKBs5Nt64Yt1ijQFO1TSCarzJbTxNuKd1UGkrga16KMjzWKo4wRWuqfml2YK2cbf
oQd5AlBw9FL5oc+Y5KMb8UOtQyBstRuNJno0uff+9/aO3fyGZFj8mUSuLmm+M7SC
HhOklPeyy9n4MwjmcMulO9keR9RkUZktu6Wv87lJLV0IellhvJC7mFI/J2eLogN5
GU9pVvVI+WmvreI/8ANT4PxqTQGPBXwM6T5mNTe0NmAgwpsqQaULDnXu+qWeuQi9
QvY4EIc5zdBaImu171lpDPt0NBi41wE=
-----END CERTIFICATE-----
Generated at Wed Sep 10 20:42:10 2025 by rpki-client